Quadro CSI

GitLab Duo agent/skill that reviews Orbit work items and MRs through source-backed evidence, policy gates, and audit-ready decisions.

Comment

Inspiration

What it does

How we built it

Challenges we ran into

Accomplishments that we're proud of

What we learned

What's next for Quadro CSI

Inspiration

Quadro CSI started from a practical enterprise problem: developer and customer-facing decisions often move across issues, work items, merge requests, policy notes, approvals, and handoffs without carrying the evidence trail forward. For GitLab Transcend, we adapted Quadro into a GitLab Duo Agent Platform showcase so the same review logic can operate around GitLab Orbit-facing work.

What it does

Quadro Orbit Review is a public GitLab agent and project skill for source-backed decision review. It reviews GitLab work items, issues, merge requests, agents, flows, skills, and delivery decisions through a clear chain: Input Cohesion, Customer Intake, Evidence Spine, Policy/Risk, and Decision Packet.

The output is a plain-English audit packet:

  • Decision
  • Evidence used
  • Missing evidence
  • Policy / risk read
  • Recommended next step
  • Human signoff needed

Quadro approves only when evidence and authorization are present. It says no when authority is revoked, scope is invalid, or policy prohibits the action. It asks for more information when approval evidence or required source material is missing.

How we built it

The core runtime is Python with SQLite/FTS retrieval, JSONL audit state, public-safe acceptance packs, and a local browser UI. For GitLab, we added a public AGENTS.md file and a GitLab Duo skill at skills/quadro-orbit-review/SKILL.md. We also created and enabled a public GitLab custom agent named Quadro Orbit Review in the provisioned hackathon project.

What makes it useful

The GitLab Orbit angle is context: the agent is designed to read the work item, issue, merge request, repository files, docs, and linked project context before returning a decision. That lets Quadro act as a review layer for developer workflows where a team needs traceability before proceeding.

Proof path

This is not a static mockup. The repository includes nine public-safe acceptance packs covering approval, revoked consent, missing approval, insurance, banking, legal authority, government procurement, cybersecurity disclosure, and consent reroute cases.

Run it locally:

python3 -m venv .venv
.venv/bin/python -m pip install --upgrade pip
.venv/bin/python -m pip install -r requirements.txt
.venv/bin/python run_quadro_demo.py

Expected result:

Quadro demo passed: all acceptance sets returned expected outcomes.

Links

Built With

  • ai-agents
  • devops
  • gitlab-agent-skills
  • gitlab-duo-agent-platform
  • gitlab-orbit
  • jsonl
  • productivity
  • python
  • rag
  • sqlite
Share this project:

Updates